function readOnly(count){ }
Starting November 20, the site will be set to read-only. On December 4, 2023,
forum discussions will move to the Trailblazer Community.
+ Start a Discussion

Query about Profiles & Roles

1. I have a custom object "testObj"

2. There are many profiles used in my system and this testObj currently is accessble to only some of them, e.g. Profile1, Profile2 & Profile3.

3. Company CEO has profile Profile4 and this profile is assigned to several other users as well.

4. CEO now wants read access to testObj. I cannot grant the access to Proifle 4 directly because all others users will too get read access to testObj. I also cannot create new profile just for CEO.


Can anybody advise a solution?

Jia HuJia Hu
You can try to use 'Permission Sets',...
For example, change the Porifle 4 to read access on testObj, and make a new Permission Sets with what you delete from Profile 4

then link this Permission Sets to all the users of Profile 4, except your CEO

Then the CEO will have read only to testObj, and all others in Profile 4 will get extra permission of testObj from the Permission Set.



Permission set is the Best Option for this scenario

Create a permission set with required permissions and then assign it to a concern user to whom you want to give those specific permissions.


One Poing here


 @Jia Hu

You can use permission sets to grant access, but not to deny access.

Crating permission set:


Setup->Manage Users-> Permission set and click new and give required permissions as given in profile

Now click on view users and click on NEW user


Go to Particular User (Setup->Manage Users-> users) and click on Permission set assignment and add that user.


You can get over view about permission set by following Below Link



IF this reply helps you in solveing or solves your problem mark it as Resolved.


I agree with HariDinesh.


You would not change profile 4, but create a permission set with access to testObj, and grant that permission set to your CEO.